Twitter was fined $150 million for using phone numbers and email addresses collected for two-factor authentication for ad targeting.